Advisories » MGASA-2026-0173

Updated xmlrpc-c packages fix security vulnerabilities

Publication date: 05 Jun 2026
Modification date: 05 Jun 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2022-25236 , CVE-2022-25313 , CVE-2022-25314 , CVE-2022-25315 , CVE-2022-40674 , CVE-2022-43680

Description

This update fixes the vulnerabilities by no longer building with the
vulnerable bundled libexpat version.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=31123
• https://www.cve.org/CVERecord?id=CVE-2022-25236
• https://www.cve.org/CVERecord?id=CVE-2022-25313
• https://www.cve.org/CVERecord?id=CVE-2022-25314
• https://www.cve.org/CVERecord?id=CVE-2022-25315
• https://www.cve.org/CVERecord?id=CVE-2022-40674
• https://www.cve.org/CVERecord?id=CVE-2022-43680

SRPMS

9/core

• xmlrpc-c-1.51.08-1.1.mga9